Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: ERCXQ/rCwIpzDrWsZfmU+NJmNsK88mHZEj347rb7wOU=
Subject key identifier: 33:1A:72:43:54:9F:2E:8D:2D:5F:5A:2B:F5:A6:7C:08:11:69:AD:3F
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019F905A560E44A0CFF1E0FCCB9A055D1171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0915
Signing time: Thu 23 Jul 2026 19:01:06 +0000
Manifest this update: Thu 23 Jul 2026 19:01:06 +0000
Manifest next update: Fri 24 Jul 2026 19:01:06 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: vE7auOHaGHY43QuAGxmBEr0kxbutfiQ74lH36l6ON5U=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:56:0e:44:a0:cf:f1:e0:fc:cb:9a:05:5d:11:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Jul 23 19:01:06 2026 GMT
Not After : Jul 24 19:01:06 2026 GMT
Subject: CN=331a7243549f2e8d2d5f5a2bf5a67c081169ad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:22:8f:a2:bb:39:09:ae:a1:11:b7:62:b0:
56:d5:22:ea:74:6c:18:2a:95:b2:b0:8d:d0:30:65:
c6:af:32:d1:06:79:7e:2f:7a:99:1b:88:e5:f7:8b:
ca:44:9f:69:21:3b:43:f3:da:26:4f:6c:44:2b:5c:
2f:6f:ad:1d:93:86:64:f2:11:ec:c1:2e:df:00:04:
f8:3d:e1:ff:55:2f:0c:a5:02:63:bc:2c:9f:8a:c2:
ce:4a:c3:83:10:15:bb:68:f5:e6:41:b0:86:eb:ed:
fc:b6:16:43:29:27:20:19:55:9b:35:af:81:86:72:
7d:7e:d8:11:04:d8:b5:a7:c1:1a:76:90:61:9f:0e:
1d:d6:c6:ad:1f:cd:f2:78:c0:9f:e1:45:7f:f2:62:
91:cd:eb:d8:1b:b0:1a:2e:be:a7:8b:7a:9c:63:75:
3f:6c:02:d3:b5:7f:d7:9a:7a:d7:0f:08:c0:67:9a:
26:48:54:c3:8a:9d:35:f1:05:bc:bd:63:5e:25:dd:
ed:71:78:ed:8f:7e:74:7c:9a:0c:ce:d6:ab:1c:40:
79:5c:1c:9c:85:a7:13:c7:1e:32:4c:8d:d4:68:2d:
4e:85:3f:02:6b:c7:b6:76:8a:56:98:1d:c3:50:99:
35:5f:b3:b7:06:ca:a6:b8:19:a9:37:59:af:b9:dd:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:72:43:54:9F:2E:8D:2D:5F:5A:2B:F5:A6:7C:08:11:69:AD:3F
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:06:2b:59:fb:eb:fa:23:e2:7e:3b:fe:19:0f:08:5e:c6:06:
76:1e:0e:90:60:69:6f:84:7f:e9:80:cb:0f:31:94:20:31:e5:
ef:b4:c5:c5:86:41:cc:65:b4:2d:c8:b1:9a:31:d0:ef:7c:40:
4d:88:69:ab:f9:c7:70:34:d5:8b:66:3e:ca:ae:7d:09:ab:e9:
2f:96:a1:a5:60:30:5e:5d:7d:f3:07:47:b8:02:73:6f:d2:cb:
86:2d:34:6d:e3:e9:d9:9e:fd:e7:15:12:28:e6:2c:af:19:a3:
15:a5:49:8c:2b:30:c3:f9:74:46:ef:cc:f8:f3:f5:78:34:21:
33:32:ed:97:9c:54:77:3e:84:89:76:44:98:e6:fb:b5:75:ab:
28:6c:fa:9c:f6:e7:43:90:cb:1b:11:65:cb:6e:de:c9:82:61:
76:9b:2b:86:1a:53:7e:06:fe:11:80:6e:7f:7f:a1:e4:fa:a3:
3b:d5:5a:6c:65:58:b4:aa:5b:c3:3d:b1:bd:b9:a3:04:4e:25:
a9:83:a9:7f:92:cd:d1:60:9b:15:6b:13:28:18:2f:7b:ef:e6:
8a:93:41:33:87:9f:a9:c1:3d:f3:56:07:74:0a:ea:51:57:9a:
72:7b:08:d6:ab:e1:46:a1:22:6f:4f:7c:93:9d:85:7a:ef:92:
82:9e:29:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWlYORKDP8eD8y5oFXRFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh
MzBhNDIwHhcNMjYwNzIzMTkwMTA2WhcNMjYwNzI0MTkwMTA2WjAzMTEwLwYDVQQD
EygzMzFhNzI0MzU0OWYyZThkMmQ1ZjVhMmJmNWE2N2MwODExNjlhZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOEij6K7OQmuoRG3YrBW1SLqdGwY
KpWysI3QMGXGrzLRBnl+L3qZG4jl94vKRJ9pITtD89omT2xEK1wvb60dk4Zk8hHs
wS7fAAT4PeH/VS8MpQJjvCyfisLOSsODEBW7aPXmQbCG6+38thZDKScgGVWbNa+B
hnJ9ftgRBNi1p8EadpBhnw4d1satH83yeMCf4UV/8mKRzevYG7AaLr6ni3qcY3U/
bALTtX/XmnrXDwjAZ5omSFTDip018QW8vWNeJd3tcXjtj350fJoMztarHEB5XByc
hacTxx4yTI3UaC1OhT8Ca8e2dopWmB3DUJk1X7O3BsqmuBmpN1mvud0a6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMackNUny6NLV9aK/WmfAgRaa0/MB8GA1UdIwQY
MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt
Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0
LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwYrWfvr
+iPifjv+GQ8IXsYGdh4OkGBpb4R/6YDLDzGUIDHl77TFxYZBzGW0LcixmjHQ73xA
TYhpq/nHcDTVi2Y+yq59CavpL5ahpWAwXl198wdHuAJzb9LLhi00bePp2Z795xUS
KOYsrxmjFaVJjCsww/l0Ru/M+PP1eDQhMzLtl5xUdz6EiXZEmOb7tXWrKGz6nPbn
Q5DLGxFly27eyYJhdpsrhhpTfgb+EYBuf3+h5PqjO9VabGVYtKpbwz2xvbmjBE4l
qYOpf5LN0WCbFWsTKBgve+/mipNBM4efqcE981YHdArqUVeacnsI1qvhRqEib098
k52Feu+Sgp4pyQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:13 2026 by rpki-client